[windows2000] Re: FW: Account operator privileges bet
- From: "Costanzo, Ray" <rcostanzo@xxxxxxxxxxx>
- To: <windows2000@xxxxxxxxxxxxx>
- Date: Mon, 5 May 2003 16:41:49 -0400
Yeah, network guy here is like, "Eh, that's all stored in the active
directory. Here, let me show you. Open the AD Users and Computers
snap-in, go to computers, right click that computer, and click manage.
Look at the admin group. See, that's in the AD." And I'm all like,
"Uh, no. I'm connecting to that remote workstation to get this
information..." I will be collecting a dollar.
Thank you all.
p.s. Someone please get me a job where network people understand
fundamentals.
Ray at work
> -----Original Message-----
> From: Sullivan, Glenn [mailto:GSullivan@xxxxxxxxxxxxxx]=20
> Sent: Monday, May 05, 2003 3:26 PM
> To: 'windows2000@xxxxxxxxxxxxx'
> Subject: [windows2000] FW: Account operator privileges bet
>=20
>=20
>=20
> D'oh...
>=20
> False. =20
>=20
> (I read it wrong the first time)
>=20
> Let me make it clear: Josh CAN reset the other regular (and=20
> local admin) account's password.
>=20
> Sorry,
>=20
> Glenn Sullivan, MCSE+I MCDBA
> David Clark Company Inc.
>=20
>=20
> -----Original Message-----
> From: Sullivan, Glenn=20
> Sent: Monday, May 05, 2003 3:24 PM
> To: 'windows2000@xxxxxxxxxxxxx'
> Subject: RE: [windows2000] Account operator privileges bet
>=20
>=20
> True.
>=20
> The domain knows nothing of his local group memberships. =20
> Local groups membership is applied by the local SAM, after=20
> the user has authenticated to the domain (in a domain environment).
>=20
> Settling another argument? I'm going to have to ask for=20
> mediation fees pretty soon...
>=20
> Glenn Sullivan, MCSE+I MCDBA
> David Clark Company Inc.
>=20
>=20
> -----Original Message-----
> From: Costanzo, Ray [mailto:rcostanzo@xxxxxxxxxxx]
> Sent: Monday, May 05, 2003 3:19 PM
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Account operator privileges bet
>=20
>=20
>=20
> Hi list,
>=20
> If anyone could settle a bet here...
>=20
> Domain user JOSH has account operator privileges in the=20
> domain. JOSH is permitted to reset passwords for ordinary=20
> users and other users who do not have higher privileges in=20
> the domain (i.e. domain admin). Now, TRUE OR FALSE. JOSH=20
> does not have permissions to reset a DOMAIN user account=20
> (ordinary user) if that user has LOCAL ADMIN rights on his=20
> WINDOWS NT workstation.
>=20
> Thanks,
>=20
> Ray at work
>=20
>=20
> **********************************************************************
> This email and any files transmitted with it are confidential=20
> and intended solely for the use of the individual or entity=20
> to whom they are addressed. If you have received this email=20
> in error please notify the system manager.
>=20
> This footnote also confirms that this email message has been=20
> swept by MIMEsweeper for the presence of computer viruses.
>=20
www.mimesweeper.com
**********************************************************************
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.mimesweeper.com
**********************************************************************
==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Other related posts:
